local-it/mitgliederverwaltung
2
3
Fork 0
Code Issues 66 Pull requests 6 Projects 3 Releases Packages 1 Activity Actions

Apply UI authorization to User LiveViews (Index and Show)

Browse source 
Gate New User button, Edit and Delete links with can?/3.
Edit button on User Show visible only when user can update the user.
This commit is contained in:
Moritz 2026-02-03 16:35:32 +01:00
parent 5e361ba400
commit 2f67c7099d
Signed by: moritz
GPG key ID: 1020A035E5DD0824
2 changed files with 21 additions and 13 deletions
Download patch file Download diff file Expand all files Collapse all files

8
lib/mv_web/live/user_live/show.ex
View file

@ -41,9 +41,11 @@ defmodule MvWeb.UserLive.Show do
<.icon name="hero-arrow-left" />
<span class="sr-only">{gettext("Back to users list")}</span>
</.button>
<.button variant="primary" navigate={~p"/users/#{@user}/edit?return_to=show"}>
<.icon name="hero-pencil-square" /> {gettext("Edit User")}
</.button>
<%= if can?(@current_user, :update, @user) do %>
<.button variant="primary" navigate={~p"/users/#{@user}/edit?return_to=show"}>
<.icon name="hero-pencil-square" /> {gettext("Edit User")}
</.button>
<% end %>
</:actions>
</.header>